$ rpki-client -vvf rpki-rsync.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/3130332e3136382e3134392e302f32342d3234203d3e20313432333135.roa File: 3130332e3136382e3134392e302f32342d3234203d3e20313432333135.roa (raw, json) Hash identifier: f8d867FdOKPAI9FI9ckkqBnXV6BMv6oUu/lBMN4pJIk= Subject key identifier: 6D:21:0B:6E:3D:43:AB:8C:55:B2:8F:1F:7A:8E:FE:8B:9B:E5:CB:77 Certificate issuer: /CN=38F5CCFB43C14A0A6D836EE754A8073545066216 Certificate serial: 453BB621FC344ACA62D33907002C73CB05F1A792 Authority key identifier: 38:F5:CC:FB:43:C1:4A:0A:6D:83:6E:E7:54:A8:07:35:45:06:62:16 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38F5CCFB43C14A0A6D836EE754A8073545066216.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/3130332e3136382e3134392e302f32342d3234203d3e20313432333135.roa Signing time: Sun 03 May 2026 02:13:13 +0000 ROA not before: Sun 03 May 2026 02:08:13 +0000 ROA not after: Sun 02 May 2027 02:13:13 +0000 asID: 142315 IP address blocks: 103.168.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/38F5CCFB43C14A0A6D836EE754A8073545066216.crl rsync://rpki-rsync.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/38F5CCFB43C14A0A6D836EE754A8073545066216.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38F5CCFB43C14A0A6D836EE754A8073545066216.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:06:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:3b:b6:21:fc:34:4a:ca:62:d3:39:07:00:2c:73:cb:05:f1:a7:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38F5CCFB43C14A0A6D836EE754A8073545066216 Validity Not Before: May 3 02:08:13 2026 GMT Not After : May 2 02:13:13 2027 GMT Subject: CN=6D210B6E3D43AB8C55B28F1F7A8EFE8B9BE5CB77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4a:9a:af:0c:6d:8b:5d:ce:c0:17:77:ee:e6: 54:5d:c6:69:b9:a3:93:6a:48:c2:51:46:ba:42:fe: bb:86:65:47:f6:a8:24:30:1d:8f:98:73:e8:9d:36: dc:fe:4f:4a:09:24:d4:97:e7:d2:83:5d:ad:b3:b9: 64:4f:ab:e2:f2:c6:3b:6d:0e:69:b8:6e:df:2d:6a: 73:67:3a:a9:24:12:a2:52:9f:30:7f:14:af:e0:6c: f2:10:f0:c0:79:7b:45:ae:d1:8c:b9:f4:3d:a4:4b: 63:3d:70:a5:dc:73:4e:22:57:e4:a4:d0:86:99:42: ab:63:0a:c8:ac:10:66:7b:76:e8:ec:0a:bc:8e:45: ce:a4:a7:88:ed:10:07:02:17:ef:df:f4:91:ae:19: 3a:9e:f9:86:29:45:21:82:fd:ac:5b:2a:aa:be:2d: 6f:61:6d:fd:2a:08:d1:8f:95:1d:4a:6c:fb:23:da: a6:6c:46:19:b1:13:16:7d:2f:12:22:08:f0:6a:59: f2:10:54:ed:9b:af:f4:df:fd:dc:8d:7e:52:2f:d5: 79:80:98:50:b4:3b:84:a9:cd:63:ad:e6:00:14:1d: 9c:08:92:7c:d0:c4:52:12:3f:d1:93:44:d1:5e:3f: f1:26:85:15:7d:c6:0e:0f:53:50:32:d2:31:a8:29: 2c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:21:0B:6E:3D:43:AB:8C:55:B2:8F:1F:7A:8E:FE:8B:9B:E5:CB:77 X509v3 Authority Key Identifier: keyid:38:F5:CC:FB:43:C1:4A:0A:6D:83:6E:E7:54:A8:07:35:45:06:62:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/38F5CCFB43C14A0A6D836EE754A8073545066216.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38F5CCFB43C14A0A6D836EE754A8073545066216.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/3130332e3136382e3134392e302f32342d3234203d3e20313432333135.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.168.149.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:7e:78:6a:eb:e7:25:39:53:8b:b1:2f:d3:53:af:97:1e:7a: 47:ec:24:1e:5c:00:de:67:7d:41:5f:81:f8:a2:1e:4d:07:e1: 22:64:8f:3d:b6:e4:21:9b:a7:66:5c:d6:94:35:2a:ac:4f:74: f5:cc:d0:6d:72:1b:71:97:75:15:8a:31:0a:8e:a1:d4:f7:73: 74:b3:e6:f4:f9:c8:1e:17:91:7e:ac:b4:92:a0:20:b2:51:2d: 5d:1f:3e:9f:c9:d5:1a:3c:24:f4:2f:ec:1b:d6:fa:ab:ad:ee: 25:6e:37:4d:5d:11:7b:fd:a3:60:71:c7:9b:55:0e:75:4f:fc: e1:e9:07:b4:a5:be:bf:a8:95:63:06:0f:f3:b2:8a:57:19:6d: 1e:4e:32:a0:8f:e6:3c:01:74:a5:8c:fb:86:fd:75:82:be:a5: c6:9c:5b:02:a1:75:a7:01:33:0f:42:c5:65:f7:fb:d9:b1:5d: 95:89:00:ff:fc:4a:f8:73:76:fc:9f:24:7d:81:d0:e3:ea:09: a6:18:82:09:b7:98:d4:59:e7:2e:d4:c1:b7:39:99:91:1e:71: 5b:20:ee:e5:d7:8e:75:5d:43:d6:2f:3c:35:6f:51:da:71:8f: 89:83:96:56:76:d7:67:e2:53:fa:e7:d7:e6:28:27:46:e3:1b: 9b:28:ef:5f -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIURTu2Ifw0Sspi0zkHACxzywXxp5IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhGNUNDRkI0M0MxNEEwQTZEODM2RUU3NTRBODA3MzU0 NTA2NjIxNjAeFw0yNjA1MDMwMjA4MTNaFw0yNzA1MDIwMjEzMTNaMDMxMTAvBgNV BAMTKDZEMjEwQjZFM0Q0M0FCOEM1NUIyOEYxRjdBOEVGRThCOUJFNUNCNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4SpqvDG2LXc7AF3fu5lRdxmm5 o5NqSMJRRrpC/ruGZUf2qCQwHY+Yc+idNtz+T0oJJNSX59KDXa2zuWRPq+Lyxjtt Dmm4bt8tanNnOqkkEqJSnzB/FK/gbPIQ8MB5e0Wu0Yy59D2kS2M9cKXcc04iV+Sk 0IaZQqtjCsisEGZ7dujsCryORc6kp4jtEAcCF+/f9JGuGTqe+YYpRSGC/axbKqq+ LW9hbf0qCNGPlR1KbPsj2qZsRhmxExZ9LxIiCPBqWfIQVO2br/Tf/dyNflIv1XmA mFC0O4SpzWOt5gAUHZwIknzQxFISP9GTRNFeP/EmhRV9xg4PU1Ay0jGoKSznAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUbSELbj1Dq4xVso8feo7+i5vly3cwHwYDVR0j BBgwFoAUOPXM+0PBSgptg27nVKgHNUUGYhYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGRkMDc4ZmUtMDkzMC00NWRjLWI0MDMtM2NlNGU4NjNmOGI1LzAvMzhGNUNDRkI0 M0MxNEEwQTZEODM2RUU3NTRBODA3MzU0NTA2NjIxNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zOEY1Q0NGQjQzQzE0QTBBNkQ4MzZFRTc1NEE4MDczNTQ1MDY2 MjE2LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzBkZDA3OGZlLTA5MzAtNDVkYy1i NDAzLTNjZTRlODYzZjhiNS8wLzMxMzAzMzJlMzEzNjM4MmUzMTM0MzkyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzIzMzMxMzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnqJUwDQYJ KoZIhvcNAQELBQADggEBAC5+eGrr5yU5U4uxL9NTr5ceekfsJB5cAN5nfUFfgfii Hk0H4SJkjz225CGbp2Zc1pQ1KqxPdPXM0G1yG3GXdRWKMQqOodT3c3Sz5vT5yB4X kX6stJKgILJRLV0fPp/J1Ro8JPQv7BvW+qut7iVuN01dEXv9o2Bxx5tVDnVP/OHp B7Slvr+olWMGD/OyilcZbR5OMqCP5jwBdKWM+4b9dYK+pcacWwKhdacBMw9CxWX3 +9mxXZWJAP/8SvhzdvyfJH2B0OPqCaYYggm3mNRZ5y7Uwbc5mZEecVsg7uXXjnVd Q9YvPDVvUdpxj4mDllZ212fiU/rn1+YoJ0bjG5so718= -----END CERTIFICATE-----Generated at Wed May 13 04:51:10 2026 by rpki-client